A Quantum Adiabatic Algorithm for Factorization and Its Experimental 

Implementation 
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We propose an adiabatic quantum algorithm capable of factorizing numbers, using fewer qubits 
than Shor's algorithm. We implement the algorithm in an NMR quantum information processor 
and experimentally factorize the number 21. Numerical simulations indicate that the running time 
grows only quadratically with the number of qubits. 
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Using quantum mechanical systems as computational 
devices may be a possible way to build computers that 
are qualitatively more powerful than classical computers 
[l| . The algorithms that are adapted to the special capa- 
bilities of these devices are called quantum algorithms. 
One of the best known quantum algorithms is Shor's al- 
gorithm for integer factorization [2|. Since no efficient 
factorization algorithm is known for classical computers 
various cryptographic techniques rely on the diffi- 
culty of finding the prime factors of large numbers 
However, in 1994, Peter Shor developed a quantum al- 
gorithm that can factorize large numbers in polynomial 
time 0- This discovery was one of the main reasons for 
the subsequent strong interest in quantum computation. 
An experimental implementation of Shor's algorithm was 
demonstrated by Vandersypen et al. Q, using nuclear 
spins as qubits to find the prime factors of 15. More re- 
cent experiments by Lu et al. [f| and Lanyon et al. Q 
used photons as qubits and found the same factors. 

While Shor's algorithm and its experimental imple- 
mentation are based on the circuit (or network) model 
of quantum computing, different models have been pro- 
posed later. Here, we consider the adiabatic quantum 
computing model proposed by Farhi et al The ba- 
sis of this model is the quantum adiabatic theorem: A 
quantum system remains in its instantaneous eigenstate 
if the system Hamiltonian varies slowly enough and if 
there is a gap between this eigenvalue and the rest of the 
Hamiltonian's spectrum [ij[l(|. It has been pro ved to be 
equivalent to the conventional circuit model [llj . Several 
adiabatic quantum algorithms have been discussed, such 
as 3SAT and search of unstructured databases (8. 12. 13j|. 
Compared to the network model, the adiabatic scheme 
appears to offer lower sentivitiy to some perturbations 
and thus improved robustness against errors due to de- 
phasing, environmental noise and some unitary control 
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In this paper, we propose a factorization algorithm 
that uses the adiabatic approach to quantum informa- 
tion processing. We also implement this algorithm ex- 
perimentally, using nuclear spin qubits to factorize the 



number 21. 

There is a large class of numerical problems that can be 
brought into the form of an optimization problem. Many 
of them form hard problems. The quantum adiabatic 
computation supplies a possible method for solving these 
problems. It requires an initial Hamiltonian Hq whose 
ground state ip g (0) is well known, and a problem Hamil- 
tonian Hp, whose ground state encodes the solution of 
the optimization problem. Implementing this method re- 
quires one to first prepare the system into the ground 
state of H at t = 0. Subsequently, the Hamiltonian is 
changed, slowly enough for fulfilling the adiabatic condi- 
tion, until it is turned into the problem Hamiltonian Hp 
after a time T. In the simplest case, the change of the 
Hamiltonian is realized by an interpolation scheme 



H(t) = [1 - s{t)]H + s(t)H P . 



(1) 



where the function s(t) : — * 1 parametrizes the interpo- 
lation. The solution of the optimization problem is then 
determined by measuring the final ground state ip g (T) of 
Hp. 

We now apply this approach to find nontrivial prime 
factors of an £-digit integer N = p x q where p and q are 
prime numbers. Without loss of generality, we assume 
that N is odd (in case of even N, we could repeatedly 
divide TV by 2 until an odd integer is obtained). We 
can write the factorization problem as an optimization 
problem by using the function f(x,y) = (N — xy) 2 , in 
which the variables x and y are positive integers [1 €31 ] - 
Clearly, the minimum of this function is reached when x 
and y are the factors of N. 

To solve this optimization problem by the adiabatic 
quantum algorithm, wc must construct a problem Hamil- 
tonian for the function f(x,y), whose ground state is 
the solution. Generally, the eigenvalues of the problem 
Hamiltonian are f(x,y), and the corresponding eigenvec- 
tors \x) and \y) represent the variables x and y. These 
conditions are satisfied by 



Hp = ^T / f{x,y)\x,y){x,y\ 



(2) 
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To determine the Hilbert space that we need for imple- 
menting this scheme, we first consider the possible range 
of the variables x and y. Since N is odd, its factors 
x and y must also be odd, i.e. its last bit is always 1 
and can therefore be omitted during the adiabatic evo- 
lution. Without loss of generality, we choose x < y and 
3 < x < vN, y/~N < y < -j. It is easy to prove that 
n x = m(\^f~N\ ) — 1 < |_=r"J ~~ 1 bits are sufficient to rep- 
resent x and n y = m(|_yj) — 1 < I — 2 bits to represent 
y, where [a\ ([a\ ) denotes the largest (odd) integer not 
larger than a, while m(b) denotes the smallest number 
of bits required for representing b. The total number of 
qubits required are n = n x +n y < [^-\ +£—3 ~ 0(3//2), 
which is less than the number of qubits used in Shor's al- 
gorithm (2^+1+ [log(2 + i)l ~ O(20, with e the failure 
probability and |~c] denotes the smallest integer not less 
than c) [2|. 

Using the conventional computational basis {|0), |1)} 
= {I T)i I it is straightforward to construct the prob- 
lem Hamiltonian: 

Hp = [Ar / _(2«^-i__^ + ... + 2 1 ^ +J)X 

T _ n nx J _ n n 

( 2 »»-i _^ + ... + 2 1 ^-^+/)] 2 , (3) 

where / represents the unit operator and a\ is the Pauli 
matrix of qubit i. 

All computational basis states \z1Z2 • • • z n ), with Zi = 
or 1, are eigenstates of Hp and the corresponding eigen- 
values are (N — xy) 2 , in which x and y are represented 
by the bits z\ ■ ■ ■ z n!c and z„ x+1 • • • z n , respectively. The 
lowest eigenvalue of Hp is 0, and the corresponding eigen- 
state (i.e., the ground state) \p')\q') encodes the factors 
p = 2p' + 1 and q = 2q' + 1. 

As the initial Hamiltonian, we choose 

H(p)=g(*l + o* + . + (4) 

This Hamiltonian describes a system, in which all the 
spins interact with the same magnetic field with strength 
g, oriented along the cc-axis. Its ground state is 

|0> — ]1> |0)-|1) |0)-|1) 
vz 0=0 

where b(j) is the parity of j (i.e. the number of Is in the 
binary representation modulo 2). The initial state is thus 
an equal superposition of all computational basis states, 
each representing a combination of trial factors x and y. 

In the adiabatic process, the system evolves under 
the time-dependent Hamiltonian (TT]) according to the 
Schrodinger equation: 

4Mt))=H(t)\m), (6) 



with the initial condition \ip(0)) — \i[>g(0)). The adia- 
batic theorem Q ensures that, if the evolution time T is 
long enough, the quantum system will always be close to 
the ground state of H(t), and the final state will be the 
solution of the problem. 




FIG. 1: (a) Energy level diagram for the adiabatic factor- 
ization of N = 21 when s(t) = (t/T) 2 and T = 0.168. (b) 
Occupation probabilities for the computational basis states 
\zi Z2Z3) for the theoretical simulation (denoted by blue bars) 
and experimentally reconstructed populations of the compu- 
tational basis states after m evolution steps (denoted by red 
bars), (c) Measured spectra of 13 C for each adiabatic step. 
The four resonance lines of 13 C are labeled by the correspond- 
ing states of the two other qubits. The spectra were adjusted 
as absorption spectra by 180° phase correction, which leads 
to positive amplitude indicating the |1) subspace of the 13 C 
qubit. A color scale indicates peak intensities, which are in 
arbitrary units. The system starts in an equal weight super- 
position and evolves to the desired final state 1 1 1 1} , which 
encodes the solution p — 3, q — 7. 

As an example, we apply this algorithm to the factor- 
ization of 21. The number of qubits required to represent 
the two registers x and y is n x = m([-\/21\ ) — 1 = 1, 
riy = to(L^-J) — 1 = 2. Hence, the total number of 
qubits needed is n = 3. According to Eq.©, the prob- 
lem Hamiltonian is: 

Hp = 210/ + 84(7* + ssa 2 z + Ua 3 z - 20al(7 2 z - 10ala 3 z 
+20a 2 z al - 16ay z a 3 z . (7) 

Its energy-level diagram is shown in Fig. [T] (a) where we 
used s(t) = {t/T) 2 to interpolate the Hamiltonian (1), a 
total evolution time T — 0.168 and g — 30. Under these 
conditions, the adiabatic condition is satisfied as the sys- 
tem evolves towards the desired final state at t = T. The 
blue bars in Fig. [JJ (b) shows the numerical simulation for 



3 



the evolution of the occupation probabilities of the com- 
putational basis states | z\Z2Z^) when the whole adiabatic 
evolution is divided into 6 equidistant steps. The ground 
state of the problem Hamiltonian, |111) encodes the value 
of x in the first bit, sop= 2z% + 1 = 3, and the value of 
y in the second and third bits, q = 4z 2 + 2z 3 + 1 = 7. 

Now we turn to the real physical system (a three qubit 
NMR quantum processor) to demonstrate this algorithm. 
The three qubits are represented by the 1 H, 13 C, and 19 F 
nuclear spins of Diethyl-fluoromalonate. The molecular 
structure is shown in Fig. [2] (a), where the three nu- 
clei used as qubits are marked by the oval. The natural 
Hamiltonian of the three-qubit system in the rotating 
frame is 
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where a;, represent the field strengths and J^- the cou- 
pling constants Jhc = 161.3Hz, Jqf = —192.2Hz and 
Jhc — 47.6Hz. Experiments were carried out at room 
temperature, using a Bruker Avance II 500 MHz (11.7 
Tesla) spectrometer equipped with a QXI probe with 
pulsed field gradient. 

The experiment was divided into three steps (Fig. [2] 
(b)): initial state preparation into the ground state of 
iJ(0), adiabatic passage for the time-dependent H(t), 
and measurement of the final ground state of H{T). 
Starting from thermal equilibrium, we first created 
a pseudopure state (PPS) [U |H| 
e|000)(000|, with 1 representing the 8 x 
tor and e ~ 10 -5 the polarization. The ground state of 
H(0) [Eq. J5])] was prepared from p 000 by applying n/2 
pulses along the —y axis to each qubit. 

The adiabatic evolution of H (t) was approximated by 
M + 1 discrete steps 

0, 

19, 22]. Instead of the usual 
linear interpolation s(t) = t/T, we used a polynomial 
interpolation, s m — (m/M) r , with r integer and < 
m < M . The unitary evolution for the discrete adiabatic 
passage is then 



Pooo — "l - + 
unity opera- 



M 



M 



u = 



n u - - n 



-iH„ 



(9) 



r?j.=0 



m=0 



where the duration of each step is r = T/(M + 1). The 
adiabatic limit is achieved when both T, M — > oo and 
t — > 0. Using Trotter's formula, we can approximately 
generate the unitary operators 



-ifl"o(l — s m )-jg— iHps 



-iH (l- 



0(t 3 



The pulse sequence for the implementation of the adia- 
batic evolution is shown in Fig. [U(c). 

As a suitable set of parameters, we chose the values 
g = 30, r = 2, M = 5 and r = 0.028. This parameter set 
yields an adiabatic evolution that finds the solution in a 



FIG. 2: (a) Molecular structure of Diethyl-fluoromalonate, 
(b) schematic representation of the experiment and (c) the 
pulse sequence that implements the adiabatic evolution for 
factorizing 21. The oval in (a) marks the three spins used as 
qubits. The rectangles in (c) labelled with m represent ro- 
tations by an angle g [l — (-fj-)'] T, while the narrow empty 
rectangles denote 90° rotations and the wide ones (labeled by 
7r) denote the refocusing 180° pulses. The delays are = 
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10( 

d „ 

32 ( jj) r T - J i [ic ■ Negative durations dg m; < according to 
this formula were implemented as positive ones, by omitting 
the dashed n pulse preceding d^ and replacing the the gray 
—x pulse immediately after the period by an x pulse. 



relatively efficient way. The theoretical fidelity is around 
0.91. This means that the final state has more than 90% 
overlap with the true solution state corresponding to the 
factors. 

To read out the final state, only the occupation num- 
bers of the different computational basis states are re- 
quired. To measure the populations, we first applied a 
pulsed field gradient to dephase transverse magnetiza- 
tion, and then a [7r/2]* read-out pulse to qubit i and 
measured the resulting free induction decay signal (FID). 
The readout procedure was applied to each of the three 
qubits in subsequent experiments. In the experiment, 
we used a sample in natural abundance, i.e. only w 1% 
of the molecules had a 13 C nuclear spin. To distinguish 
those molecules against the large background, we read 
out all three qubits via the 13 C channel, by applying 
SWAP gates and measuring the 13 C qubit. 

Figure [T] (c) shows experimental spectra obtained by 
reading out the 13 C qubit, at different instances during 
the adiabatic transfer. The spectrum consists of four 
resonance lines; in the figure, they are labeled by the 



4 



corresponding logical states of the 1 H and 19 F qubits. 
While these four resonance lines have initially compara- 
ble amplitude, the last 2 measurements find almost all 
the amplitude in the line at 15.5 Hz, which corresponds 
to the 1 11) state of the 1 H and 19 F qubits. Since the 
amplitude is positive, the 13 C qubit must also be in the 
|1) state. The red bars in Fig. [T]b) show the populations 
of the eight computational ground states. They were ob- 
tained from a least-squares fit to the spectra measured 
after reading out the three different qubits. The results 
confirm that the final state has a high occupation prob- 
ability on the | 111) state, which encodes the two factors 
p = 3 and q = 7. 

These experimental results confirm that this adiabatic 
algorithm is capable of factorizing numbers. To assess 
its usefulness, we need to determine its time complexity. 
While we could not find an analytical expression for the 
running time as a function of the problem size, we per- 
formed numerical simulations to assess its efficiency [17] ■ 
For each possible problem size, we randomly chose 50 
different integers with nontrivial prime factors. Then we 
numerically integrated the Schrodinger equation © by 
a fourth-order Runge-Kutta technique. For each run, we 
determined the evolution time required to reach a success 
probability between 0.12 and 0.13 [8(. 
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FIG. 3: Average evolution time for achieving the probability 
1/8 for 50 instances as a function of the number of input 
bits n. The spheres represent the simulation data for the bit 
number 7 < n < 16, while the solid line shows the quadratic 
fit to the data. 

In Fig. [31 we plot the average of these evolution times 
against the problem size. The spheres represent simu- 
lated running times, while the solid line is a quadratic fit 
to the data. The good agreement between data points 
and fit suggests that the running time grows quadrati- 
cally with the size of the problem, indicating that our 
algorithm scales polynomially and therefore may be effi- 
cient. 

In conclusion, based on the adiabatic theorem, we pro- 
pose a new quantum algorithm for factorizing integers. 



Compared to Shor's algorithm, the present method re- 
quires a significantly smaller number of qubits. The 
experimental implementation of this algorithm, using 
an NMR quantum simulator, shows excellent agreement 
with the theoretical expectations. To the best of our 
knowledge, this is the first experimental demonstration 
of a quantum algorithm that factorizes an integer larger 
than 15. Furthermore, a numerical simulation of factor- 
ing up to 16-bit integers indicates that this algorithm 
may be efficient. 
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